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METHOD AND APPARATUS FOR 
PROVIDING OC-n VIRTUAL BRIDGE PORTS 

Field of the Invention 

This invention relates to a method and apparatus for subdividing the physical 
5 ports of network access devices into virtual ports. 

Background of the Invention 

A bridged ethernet network sometimes requires that a physical port be 
subdivided into virtual ports to allow peering with more bridging elements than the 
number of physical ports allows. Currently, ATM VPsA/Cs and Frame Relay paths 
1 o are used in the communications industry to establish such virtual ports. However, 
for very high bandwidths these technologies are not suitable due to both technical 
reasons and their high cost. On the other hand SONET/SDH devices can easily 
scale to very high bandwidths and are widespread in metropolitan and wide area 
networks (MAN/WAN). 

15 There is a need, therefore, for means to economically and effectively bridge 

network access devices transporting optical line data, such as from a fiber channel 
(FC) or Gigabit Ethernet (GbE) interface, to a SONET metropolitan area network 
(MAN)/ wide area network (WAN). 

Summary of the Invention 

20 In accordance with the present invention there is provided a method and 

apparatus for intelligent packet forwarding utilizing virtual ports defined by a 
grouping of one or more STS-1s allocated to source and destination I/O devices 
(client) connected to an N x STS-1 SONET network. A data flow path for 
transporting the client data is established from one virtual port at the source port 

25 to another virtual port at the destination port. The data flow path is established by 
notifying each of the ports of the data flow path and providing to the source port 



l 



an address identifying the destination port and providing to the destination port an 
address identifying the source port. 

Brief Description of the Drawings 

The invention will now be described in detail with reference to the following 
5 drawings in which like reference numerals refer to like elements throughout. 

Figure 1 (a) is a schematic block diagram of a metro/wide area data transport 
network illustrating, by the virtual paths S, the functionality of the method and 
apparatus of the present invention which is comprised within network access 
devices (NADs) and Figure 1(b) is a schematic illustration of the virtual ports 
10 provided by a physical port 1 of the network access device NAD1 ; 

Figure 2 is a functional block diagram of an end-to-end link of a the data 
transport network of Figure 1 showing the components of the transmit side of a 
network access device, for transporting data from a transmit (Tx) node of the 
network, and the components of the receive side of another network access device, 
15 for receiving data at a receive (Rx) node of the network; and, 

Figures 3 (a), (b) and (c) are tables which illustrate a set of MAC/IP 
addresses identifying I/O devices (a), a set of addresses for the particular 
destination I/O devices of the example (b) and a set of exemplary rules (for which 
the MAC address is chosen for use rather than the IP address) for the forwarding 
2 0 of data output by network access device NAD1 shown in Figure 1 (c), all for the 
particular circumstances of the example chosen in which NAD1 is sending data 
from an ethernet link. 

Detailed Description of the Illustrated Preferred Embodiment 

Figure 1 of the drawings is a schematic block diagram illustrating an 
2 5 exemplary data transport network 150 for transporting optical serial data output 
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from one I/O device 100 for transport through the network 150 to another I/O 
device 100. Through a high speed optical point-to-point link 110 a network access 
device (NAD) 200 interfaces each I/O device 100 to the network 150 and 
multiplexes the optical serial frame data signal into an optical SONET frame signal 
5 in a manner which controls the flow of the data and flexibly allocates STS-1 s (i.e. 
bandwidth) to each of the input I/O devices 100 interfaced to the NAD. At the 
receive end of the data transport another NAD 200 receives the transported 
SONET format data from the metro/wide area link 150 and demultiplexes and 
outputs the data onto another high speed optical point-to-point link 110 for 
l o transport to the other I/O device 1 00. The optical serial links 1 1 0, 1 1 0a could be 
ethernet (e.g. 10 Mbps, 100 Mbps or 10Gbps) or Fiber Channel (FC) and the 
metro/wide area fiber link 1 20 could be any of a dedicated fiber, dark fiber or WDM 
(Wavelength Division Multiplexed) fiber to provide a clear channel. 

Figure 2 is a functional block diagram of an end-to-end link of the data 
15 transport network 1 50 showing the functional blocks thereof for transporting data 
from a transmit (Tx) node to a receive (Rx) node of the network including the 
mapper/aggregator 10 and demapper/deaggregator 80 which provide the 
multiplexer/demultiplexer functions of the NAD 200. In this figure the network 
components of the transmit (Tx) and receive (Rx) nodes provided by two NADs, 
20 servicing clients (i.e. I/O devices) 20 ir are shown. 

The multiplexer/demultiplexer components of the NAD 200 are described in 
greater detail in an application filed herewith and owned by same assignee as this 
application, which is incorporated herein by reference. At the transmit node the 
mapper/aggregator 10 performs two related functions which combine to perform 
25 flexible time-division multiplexing (based on the SONET standard) to transport the 
data. First, a mapper maps the client data into a SONET payload whereby STS-1 's 
are allocated to a particular client 20, based on a bandwidth allocation configuration 
provided to it. Since each STS-1 represents a fixed amount of bandwidth the 
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number of STS-1's assigned to a client determines how much bandwidth is 
allocated to that client. Advantageously, the assignment of bandwidth to each 
client is flexible in that it can be assigned and changed based on any number of 
determinants (control parameters) set by a user, a network operator, an application 
5 and/or network conditions such as traffic, time of day, etc. Second, an aggregator 
aggretates (i.e. combines) the client STS-1 's into a composite STS payload (e.g. 
STS-48 or STS-192). The aggregate data stream is then fed into a standard 
SONET transmit framer 30 to insert section/line/path overhead information (data) 
and create a proper SONET frame. The parallel output from the framer 30 is then 
10 serialized and converted to an optical signal by a serializer/E-0 converter 40 for 
transmission over an optical channel 50 of the metro/wide area link 150. 

At the receive node the received optical signal is converted back to an 
electrical signal and to parallel format by an O-E/deserializer converter 60 and then 
fed into a SONET receive framer 70 where the section/line/path overhead data is 

15 extracted and processed. The resulting data stream is passed into a de- 
aggregator/de-mapper 80 which performs the inverse function of the 
mapper/aggregator 1 0. The deaggregator receives the composite STS-48 payload 
from the SONET framer and, based upon an assigned local bandwidth allocation 
configuration input thereto, it then separates the composite STS stream into STS- 

2 0 1 's according to the client 20j they are assigned to. The demapper then takes the 
STS-1 's assigned to a particular client 20j and extracts the client data from them. 

The mapper/aggregator 10 and de-aggregator/de-mapper 80 each use a 
configuration memory to assign/map each STS-1 to a particular client. For any 
particular assignment of bandwidth (STS-1 s) a client can be assigned any number 
2 5 (n) of STS-1 s from n=0 to n=N, where N is the total number of STS-1 s of the 
channel ( e.g. 48 if an OC-48 channel is used). Network management software (a 
network controller) may provides the transmit (Tx) and receive (Rx) nodes with the 
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bandwidth allocation map which assigns STS-1's to the particular clients 20, , 20 r 

In accordance with the present invention fields from layer 2 or layer 3 (or any 
layer above layer 1 ) are used to direct data traffic between virtual ports created on 
5 the basis of groupings of STS-1 s of the physical ports of the NAD. As illustrated 
by Figure 1(b) the physical ports of an NAD 200 are subdivided into virtual ports 
made up of the groups of STS-1 s allocated to a particular client. Each group of 
STS-1 s are treated as a separate (distinct) traffic stream and are independently 
routed over the network 150 to their own destination. In the example shown by 

10 Figure 1 (b) the network access device NAD1 has three physical ports 140 and the 
first port 145 comprises two virtual ports 1A and 1B each comprising the number 
of STS-1 s which are allocated to the particular I/O devices whose data is carried 
by those STS-1 groups. Knowledge of the layer addressing (e.g. for layer 2 in an 
ethernet link this would be MAC addressing) at each end of the flow path (S) for a 

15 given STS-1 group is used to define a bridge between those end points (referred 
to herein as a "virtual bridge"). Advantageously, this functionality collectively 
provides flexible bridging over the entire network. 

The tables of Figure 3 illustrate a set of exemplary rules applied within the 
network for the forwarding of data output by a first physical port 145 of the network 

20 access device NAD1 to each of network access devices NAD2 and NAD3. For this 
example ethernet data is assumed and the field used for the addressing of the 
ends of S-paths is the layer 2 MAC address (although the IP address could 
alternatively be used). A virtual port 1 A is defined by a group of client allocated 
STS-1 s whose destination is an I/O device 100 fed by NAD2 and another virtual 

25 port 1B is defined by a different group of client allocated STS-1 s whose destination 
is another I/O device 100 fed by NAD3. In the example shown in Figures 1 and 3 
the destination I/O device interfaced to NAD2 is a router R2 and the destination I/O 
device interfaced to NAD3 is another router R3. For illustration purposes in Figure 
3 the MAC address (layer 2) for R2 is designated M2 and the MAC address for R3 
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is designated M3. (The IP address for R2 designated as IP2 and the IP address 
for R3 designated as IP3 are also illustrated to indicate that layer 3 addresses can 
instead be used.) 



For this example a given set of rules is applied within the network in order 
5 to transport the data defined by virtual port 1 A to R2 and the data defined by virtual 
port 1B to R3 and these are shown by the table (c) of Figure 3. As illustrated the 
MAC address assigned to the destination I/O device is used to direct the flow of 
each virtual port. 



For purposes of illustrating the routing method of the invention, using an example, 
10 the following selected definitions are used: 



(a) The group of STS-1s that are treated as a single pipe and routed through 
the core network together are referred to as an s-path. 

(b) The MAC addresses of three I/O devices (1/01, I/02 and I/03) on the 
15 network are referenced MA1 , MA2 and MA3. 

(c) The three I/O devices are on three different NADs. 1/01 is on NAD1 , 1/02 is 
on NAD2 and I/O 3 is on NAD3. 

(d) There are three different s-path groups to be routed and each s-path 
represents a traffic flow between two I/O devices. S1-2 represents and 

20 carries the traffic flow between the 1/01 and I/02. S1-3 represents and 

carries the traffic flow between 1/01 and I/03. S2-3 represents and carries 
the traffic flow between I/02 and I/03. 



For a user to establish a connection through the network between 1/01 and I/02, 
the s-path S1-2 must be created. At this point, both NAD1 and NAD2 must be 
2 5 made aware of S 1-2 and also the MAC addresses at the ends of the s-path. This 
s-path to MAC addressment assignment may be established by the network 
management system (NMS) as follows: 
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1 . The NMS is informed by the user that 1/01 (through it's MAC address MA1) 
is attached to NAD1 and that i/02 is attached through NAD2. 

2. " When the s-path S1-2 between 1/01 and I/02 is created, the NMS informs 

NAD1 that MA2 is at the end of S1 -2 and the NMS informs NAD2 that MA1 
5 is at the end of S1-2. 

Alternatively, instead of using the NMS to establish the MAC to s-path assignment, 
a user can do so directly as follows: 

1 . The user informs NAD1 directly that a new s-path S1 -2 exists in the network. 

2. The user informs NAD1 that MA2 is at the end of S1-2. 

10 3 . The user informs NAD2 directly that a new s-path S 1 -2 exists in the network. 
4. The user informs NAD2 that MA1 is at the end of S1-2. 

It is to be noted that multiple I/O devices may be connected to a single NAD. 
In all of the above s-path and MAC address assignments, the I/O device and it's 
MAC address are associated with a port on the NAD and not the entire NAD. 

1 5 Various means may be used by the NMS/user to inform the I/O devices and 

NADs associated therewith of the created S-paths and MAC addresses at the ends 
thereof. This information can be provided either in-band (i.e. within the SONET 
payload/overhead)orout-of-band (i.e. carried to the NADs via an external network). 

20 The network 150 provides an appearance of a distributed L2 switch. As 

there is a potential for only a partial mesh of STS-1 flows only certain I/O device 
ports will be connectable (e.g. if an STS-1 flow does not exist between a first and 
second I/O device port those ports cannot be connected). In such case the data 
traffic going from a first I/O device port to a second I/O device port must be routed 

25 via another I/O port which does have an STS-1 flow to the second I/O device port 
and calculation of such extended route is accomplished automatically by supported 
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routing protocols. Also, as the MAC address to NAD port assignment is done 
manually, this method is inherently secure, making it difficult for third-parties to 
"break into" or "spoof a private network created through a group of s-paths. 

5 

Advantageously, the foregoing method of assigning a group of STS-1 s to a 
given flow of ethernet frames guarantees that QoS automatically results. As such 
the IT network is able to implement a form of traffic guarantee with non-QoS-aware 
ethernet/IP switches such that a core is implemented with no contention for 
10 bandwidth. 

The individual electronic and processing functions utilised in the foregoing 
described preferred embodiment are, individually, well understood by those skilled 
in the art. It is to be understood by the reader that a variety of other 
implementations may be devised by skilled persons for substitution. Persons 
1 5 skilled in the field of communication design will be readily able to apply the present 
invention to an appropriate implementation method for a given application. 

Consequently, it is to be understood that the particular embodiment shown 
and described herein by way of illustration is not intended to limit the scope of the 
invention claimed by the inventors which is defined by the appended claims. 
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